• info
• discussion
• exploit
• solution
• references

CompreXX Multiple Directory Traversal Vulnerabilities

Attackers may exploit these issues by creating malicious TAR, JAR, or GZ files that include files with directory-traversal strings ('../') in the names.